Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

2 External My Books Corrupted etc. & No Fix Yet. Did frst scan. Ne

JoyfulNoise

Posted 27 November 2016 - 10:47 AM

JoyfulNoise

Member

Member

48 posts

Hello Everyone,

I was recommended at my current thread here: http://www.geekstogo...ble-how-to-fix/to start a new topic here and see if it could be malware etc. and to try and use the frst.exe malware software to get further diagnostics and possible fixes for my issue with my 2 external My Books.

In short, my 2 external My Book drives are not accessible, corrupted and unreadable etc. One was changed to raw and other one is still showing up with label. I have tried so far the chkdsk /r X: and chkdsk /f /r X: with no luck. I did a computer reboot or clean install of Windows 10 v1607, with no luck. I did do data recovery with EaseUS Data Recovery and was able to recover some or possibly all my files on one of my external My Books. At this point, I don't know if I did recover all of them, but over time I will know. I also did a diagnostic with CrystalDiskInfo and it showed that my drives are good and are still usable.

At this point, my only option is to reformat these, but I don't want to do it right now because I want to see if I can get this to work still without reformatting to recover data, test things out etc. and I might do another Data Recovery with another program just in case etc.

I did the frst scan and for some reason it did not see my other external hard drive, but did see the raw one.

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

A file system index structure contains entries that violate ordering rules. The file reference number is 0x5000000000005. The name of the file is "<unable to determine file name>". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".

Thank you so much for your help, time and assistance. No problem.That is great to hear.

In this post, I just wanted to get back to you and let you know that I got your response and I should get back to you with the results of what you are requesting in a day or so. Have something going on at the moment.

JoyfulNoise

Posted 09 December 2016 - 05:44 AM

JoyfulNoise

Posted 09 December 2016 - 06:11 AM

JoyfulNoise

Member

Topic Starter

Member

48 posts

Hi emeraldnzl and good day to you.

Thank you very much for your time and assistance. I am very grateful for it. A couple of things here. First, just to let you know that the Malwarebytes program has been updated and not sure if are wanting to update your photos or not, but I thought I would let ya know! Secondly, the product I downloaded was a trial version and I don't know if that matters or not. Finally, Malwarebytes won't allow me to scan my two problem external hard drives. It says this:

A rootkit scan requires an entire drive to be selected for

scanning. Please update the areas of the system you want to

scan to include an entire drive or disable rootkit scanning

for this scan.

As of writing this post, I just started my in depth scan of those drives with ESET. No problems so far scanning with that program. I'll keep you posted on the results of the ESET Scan once finished. On the Malwarebytes issue, let me know your thoughts on what to do next with that.

JoyfulNoise

Posted 09 December 2016 - 08:12 AM

JoyfulNoise

Member

Topic Starter

Member

48 posts

Hi emeraldnzl,

I scanned with ESET, it was not able to scan the RAW drive, but the other one it did. The log shows no threats. I am now guessing that the next step with RAW drive is to reformat it so it can be readable to Windows as you said earlier. How am I thinking so far?

Also, I am not sure if this is necessary or not, but I did a Data Recovery actually on that RAW drive via the program EaseUS Data Recovery and the program recovered my files, but I am not sure if it recovered all because it put some of the files in separate folders and I have to still go through them. When I did a search on some of the missing files from my set directories I was able to find them in those other folders outside my set directories, but again I haven't gone through them all to decipher if they are all found or not. Do you think EaseUS Data Recovery is a good and/or reliable program or do you think I should do it again with another program? Any other programs do you recommend just out of curiosity.

Again, I was thinking about doing another data recovery with another program on the same RAW drive to possibly find files that EaseUS couldn't find. I just don't want to lose anything and I want to make sure. Do you think that is necessary to do or do you think what was recovered would be pretty much recovered no matter what program I use?

emeraldnzl

Posted 09 December 2016 - 12:44 PM

emeraldnzl

GeekU Instructor

GeekU Moderator

20,004 posts

Secondly, the product I downloaded was a trial version and I don't know if that matters or not.

No that's fine, it's a way of letting you try it out for a period free. You can upgrade to the paid version at the end of the trial if you want to or just leave it or uninstall it if you don't want it.

A rootkit scan requires an entire drive to be selected forscanning. Please update the areas of the system you want toscan to include an entire drive or disable rootkit scanningfor this scan.

It's only the Active drive, (which is the one you have scanned) that we are interested in for the rootkit. It, looks fine.

Do you think EaseUS Data Recovery is a good and/or reliable program or do you think I should do it again with another program?

It's not an area I have any expertise in. The one I do know about, although I have never used it, is Recuva, see below:

Recuva (pronounced "recover") is a freeware Windows utility to restore files that have been accidentally deleted from your computer. This includes files emptied from the Recycle bin as well as images and other files that have been deleted by user error from digital camera memory cards or MP3 players. It will even bring back files that have been deleted from your iPod, or by bugs, crashes and viruses!

JoyfulNoise

Posted 09 December 2016 - 04:30 PM

A rootkit scan requires an entire drive to be selected forscanning. Please update the areas of the system you want toscan to include an entire drive or disable rootkit scanningfor this scan.

It's only the Active drive, (which is the one you have scanned) that we are interested in for the rootkit. It, looks fine.

Do you think that ESET Smart Security is a sufficient answer than Malwarebytes? I am not sure if ESET checked for rootkits though. Here is the link to view the ESET scan log. https://postimg.org/image/ij2jdz677/

After you have viewed this info. Just to reiterate, What would be your final verdict? Am I ready to reformat and reuse these drives? Anything else I should be concerned about or try to look at?

NOTE: If using Internet Explorer and get an alert that stops the program downloading, click on the warning and allow the download to complete.

Close all programs and click on the AdwCleaner icon. AdwCleaner will update itself and then open.

Click on Scan and follow the prompts. It may appear not to be doing anything, please be patient and let it run unhindered. When the "Please uncheck elements you don't want to remove" appears just go ahead and click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy and paste back here. If a report doesn't appear, press the report button and Copy & Paste the contents on your next reply.

A reminder: Remember to (re-install if uninstalled during cleaning) update and turn back on any anti-malware programs you may have turned off during the cleaning process.
-------------------------------------------------------------------------------------------------------------------

Here are some things that I think are worth having a look at if you don't already know about them:

So many of us use Facebook nowadays. Go here for a guide to Facebook security.

-----------------------------------------------------------------------------------------------------------------------
It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection.
----------------------------------------------------------------------------------------------------------------------

Java warning

Java is a popular point of entry to your computer for malicous programs. Unless you need it to run an important software the safest approach is to completely uninstall Java. Where you do require it, then the next safest option is to disable it in your browsers until you need it, then enable it.